Use SHA256 by default

Author: travier

crates/lib/src/cfsctl.rs

@@ -13,7 +13,7 @@ use rustix::fs::CWD;
 use composefs_boot::{write_boot, BootOps};
 
 use composefs::{
-    fsverity::{FsVerityHashValue, Sha512HashValue},
+    fsverity::{FsVerityHashValue, Sha256HashValue, Sha512HashValue},
     repository::Repository,
 };
 
@@ -147,7 +147,7 @@ enum Command {
     },
 }
 
-fn verity_opt(opt: &Option<String>) -> Result<Option<Sha512HashValue>> {
+fn verity_opt(opt: &Option<String>) -> Result<Option<Sha256HashValue>> {
     Ok(opt.as_ref().map(FsVerityHashValue::from_hex).transpose()?)
 }
 

crates/lib/src/store/mod.rs

@@ -35,8 +35,10 @@ use crate::spec::ImageStatus;
 use crate::utils::deployment_fd;
 
 /// See https://github.com/containers/composefs-rs/issues/159
+// pub type ComposefsRepository =
+//    composefs::repository::Repository<composefs::fsverity::Sha512HashValue>;
 pub type ComposefsRepository =
-    composefs::repository::Repository<composefs::fsverity::Sha512HashValue>;
+    composefs::repository::Repository<composefs::fsverity::Sha256HashValue>;
 
 /// Path to the physical root
 pub const SYSROOT: &str = "sysroot";